<?php
class LtRbac {

    public $configHandle;

    protected $acl; 

    public function __construct()
    {
        if (! $this->configHandle instanceof LtConfig)
        {
            if (class_exists("LtObjectUtil", false))
            {
                $this->configHandle = LtObjectUtil::singleton("LtConfig");
            }
            else
            {
                $this->configHandle = new LtConfig;
            }
        }
    }

    public function init()
    {
        $this->acl = $this->configHandle->get('rbac.acl');
    }

    public function checkAcl($roles, $resource)
    {
        $allow = false;
        // deny priority
        foreach (array("allow", "deny") as $operation) 
        {
            foreach($roles as $role) 
            {
                if (isset($this->acl[$operation][$role])) 
                {
                    // everyone *
                    if (in_array($resource, $this->acl[$operation]['*'])) 
                    {
                        $allow = "allow" == $operation ? true : false;
                        break;
                    } 
                    if (in_array($resource, $this->acl[$operation][$role])) 
                    {
                        $allow = "allow" == $operation ? true : false;
                        break;
                    }
                    else 
                    {
                        $res = explode('/', trim($resource, '/'));
                        for ($i = count($res)-1; $i >= 0; $i--) 
                        {
                            $res[$i] = '*';
                            $tmp = implode('/', $res);
                            if (in_array($tmp, $this->acl[$operation][$role])) 
                            {
                                $allow = "allow" == $operation ? true : false;
                                break;
                            }
                            unset($res[$i]);
                        }
                    }
                }
            }
        }
        return $allow;
    }
/*
    private function __set($p,$v)
    {
        $this->$p = $v;
    }

    private function __get($p)
    {
        if(isset($this->$p))
        {
            return($this->$p);
        }
        else
        {
            return(NULL);
        }
    }
*/
}
